Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File: HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier: +2Wp8xxbPMiAwRTu4iv2lFPdX32AgXmttYC1X2Gg5U0=
Subject key identifier: 62:08:89:2B:F3:FD:A0:F3:14:37:D8:1D:94:69:93:00:B5:C4:AB:75
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 0198925A1CF79B8C129AE7D87B0AFE886EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 05:00:35 +0000
Manifest this update: Sun 10 Aug 2025 05:00:35 +0000
Manifest next update: Mon 11 Aug 2025 05:00:35 +0000
Files and hashes: 1: 2Sogz2f-Y-Q89kALOaFwXGpENls.roa (hash: xWX/sBmx7Cmqhctcmi5B9YqU1V0kQKRLbrhmA5MXJ0s=)
2: AAZYcUjhuGAJA3sXjywaEslf598.roa (hash: RBp9easJVYqUVgaIiMMNSM2ioBAAirvckRHOuxL4X0g=)
3: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: ZI4IGjklTvngwb94Ir8fn53s9jclrOJ1s9EwT3YCulY=)
4: KX2FVoJMwagFqXSqm7WmM6GiAdc.roa (hash: kL6N1Ap9alUNCwv0399F2Foe8bxiyXhyi55mwtllJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:1c:f7:9b:8c:12:9a:e7:d8:7b:0a:fe:88:6e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Aug 10 05:00:35 2025 GMT
Not After : Aug 11 05:00:35 2025 GMT
Subject: CN=6208892bf3fda0f31437d81d94699300b5c4ab75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:79:92:57:cc:19:96:df:ec:97:7c:df:ae:
98:62:1d:4e:f3:18:e5:e9:d9:76:32:cc:3a:4e:80:
c2:b9:ce:f8:b3:d2:ce:83:df:5f:06:c8:ae:80:54:
b0:b0:bb:57:64:81:94:f9:fb:e2:76:ab:b8:0d:ac:
ae:4c:98:3a:a3:51:f1:2f:4a:37:25:40:51:3a:4e:
4f:d0:1e:6c:ea:f9:f4:5b:6a:bb:9b:ec:d3:2a:d8:
c2:b6:16:62:d4:9a:79:9d:f4:5a:b2:73:0b:d7:5e:
5c:ad:f6:06:41:7d:fc:46:3f:f4:47:7d:b5:12:62:
13:4a:a4:c4:e1:a0:3b:d5:a5:a0:a2:51:80:b6:3f:
ad:0b:c1:c0:a7:0b:b5:96:c7:cd:f3:a2:4b:fa:64:
20:78:3f:a7:7f:de:bf:93:30:a2:df:dc:29:5b:14:
59:d3:91:6f:35:8d:a7:04:11:32:11:ea:b3:7b:3b:
3e:ed:04:65:49:02:7b:7a:6a:42:6e:41:98:55:eb:
21:45:16:88:23:8a:6e:bf:21:9b:f7:75:6d:ab:0f:
7b:8b:77:10:30:d3:b6:d3:d8:23:5c:0a:08:6e:b5:
ce:cb:dc:4b:ed:c0:7c:66:1c:9b:c9:86:59:54:c0:
8a:11:f0:1d:03:a1:6d:7a:a7:48:61:e6:30:70:f3:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:08:89:2B:F3:FD:A0:F3:14:37:D8:1D:94:69:93:00:B5:C4:AB:75
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b2:4e:27:66:db:a7:c9:b4:ff:86:9a:fc:c0:f4:9b:bf:2c:
bc:6b:34:6e:02:ec:6a:dc:5b:95:8f:c3:69:23:fd:c3:b5:df:
27:e3:af:ed:ed:1c:c5:ed:07:12:03:e8:a8:7b:ec:49:fd:95:
ee:b6:5d:6d:a7:48:5d:6d:bc:d5:13:49:4d:a5:d1:92:7f:22:
e9:5e:97:a0:c8:b3:dc:ed:de:5f:f2:58:65:18:76:2e:5a:85:
92:06:2f:20:8f:0f:a2:23:f9:ce:1b:13:6c:d5:35:bf:90:be:
3f:0c:15:16:32:03:bf:e7:0e:57:8d:35:bb:88:38:77:29:f2:
e5:58:76:37:81:b7:f5:9c:81:7b:93:c6:f0:13:30:0f:20:db:
a2:2a:37:84:67:d5:df:33:74:b6:25:33:65:c5:4a:92:24:5c:
6a:da:87:0d:5a:3f:75:a0:6f:e8:af:d2:b3:9c:39:79:f8:e6:
8f:95:99:28:45:8d:9c:8d:9f:e6:32:ff:b3:22:54:fa:ec:bb:
37:76:5e:eb:00:f5:fe:7a:47:14:77:28:bb:b7:23:d1:f2:40:
a0:f0:11:1b:8f:90:e2:2e:28:7d:06:ec:89:c2:7b:b5:6c:41:
b9:3e:97:5f:49:0a:7e:b3:94:c2:bc:88:f2:82:19:26:67:69:
62:82:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:00:48 2025 by rpki-client